From 21d0f66c15fe0a35a1e66d30545ce0e4786ab54b Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Mon, 13 Jul 2026 12:00:35 +0200
Subject: [PATCH] =?UTF-8?q?v0.126.2:=20stylesheet=20cache-bust=20=3Fv=3D{{?=
 =?UTF-8?q?.Version}}=20=E2=80=94=20CF=20edge=20caches=20/static/style.css?=
 =?UTF-8?q?=204h,=20every=20release=20served=20the=20previous=20CSS=20unti?=
 =?UTF-8?q?l=20TTL=20(hub=20v0.47.0=20gotcha=20class,=20controller=20insta?=
 =?UTF-8?q?nce)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CHANGELOG.md                                  | 7 +++++++
 controller/internal/web/templates/layout.html | 5 ++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2d006ef..4e65d0b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 ## Changelog
 
+### v0.126.2 — stylesheet cache-bust (2026-07-13)
+
+0.126.1 live QA: Cloudflare edge-caches `/static/style.css` for 4h (`Cf-Cache-Status: HIT`), so
+every controller release kept serving the PREVIOUS release's CSS to customers until TTL. The
+stylesheet link now carries `?v={{.Version}}` — busts automatically on every release (the same
+gotcha class as the hub v0.47.0 /style.css finding, now extinct on the controller too).
+
 ### v0.126.1 — .form-input/.form-row finally have CSS (2026-07-13)
 
 Live QA on 0.126.0 (drill box) showed the .fab password field STILL browser-default: the
diff --git a/controller/internal/web/templates/layout.html b/controller/internal/web/templates/layout.html
index 7eeed11..fe4b260 100644
--- a/controller/internal/web/templates/layout.html
+++ b/controller/internal/web/templates/layout.html
@@ -6,7 +6,10 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>{{.Title}} — Felhom.eu</title>
     <link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
-    <link rel="stylesheet" href="/static/style.css">
+    {{/* ?v= cache-bust: Cloudflare edge-caches /static/* for 4h — an unversioned URL keeps
+         serving the PREVIOUS release's CSS after a deploy (0.126.1 live QA hit this). The
+         controller version busts it automatically on every release. */}}
+    <link rel="stylesheet" href="/static/style.css?v={{.Version}}">
     <meta name="csrf-token" content="{{.CSRFToken}}">
     <script>
     function csrfHeaders(){var el=document.querySelector('meta[name="csrf-token"]');return el?{'X-CSRF-Token':el.content}:{};}